From 3848b98961614e1776b29ecfb76ef4c750b6b25f Mon Sep 17 00:00:00 2001
From: Fred Barclay <Fred-Barclay@users.noreply.github.com>
Date: Tue, 7 Apr 2020 16:14:25 -0500
Subject: Replace `nodbus` with dbus-* filters

See
- 07fac581f6b9b5ed068f4c54a9521b51826375c5 for new dbus filters
- https://github.com/netblue30/firejail/pull/3326#issuecomment-610423183

Except for ocenaudio, access/restrictions on dbus options should
be unchanged

Ocenaudio profile: dbus filters were sandboxed (initially `nodbus`
was enabled) since comments indicated blocking dbus meant
preferences were broken
---
 etc/calligra.profile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

(limited to 'etc/calligra.profile')

diff --git a/etc/calligra.profile b/etc/calligra.profile
index 7054739c8..489036e39 100644
--- a/etc/calligra.profile
+++ b/etc/calligra.profile
@@ -16,7 +16,6 @@ caps.drop all
 ipc-namespace
 # net none
 netfilter
-# nodbus
 nodvd
 nogroups
 nonewprivs
@@ -31,5 +30,8 @@ shell none
 private-bin calligra,calligraauthor,calligraconverter,calligraflow,calligraplan,calligraplanwork,calligrasheets,calligrastage,calligrawords,dbus-launch,kbuildsycoca4,kdeinit4
 private-dev
 
+# dbus-user none
+# dbus-system none
+
 # noexec ${HOME}
 noexec /tmp
-- 
cgit v1.2.3-70-g09d2